This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lYdRv68QBXjRttIYgVZzJoyauyU.roa File: lYdRv68QBXjRttIYgVZzJoyauyU.roa (raw, json) Hash identifier: jql5Zexhye487EU51RRPsc6wqZg3movkURm8VfWxyu0= Subject key identifier: 95:87:51:BF:AF:10:05:78:D1:B6:D2:18:81:56:73:26:8C:9A:BB:25 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B92A32D470D13749BCCDFB687665 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lYdRv68QBXjRttIYgVZzJoyauyU.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211017 IP address blocks: 2a13:a5c7:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b9:2a:32:d4:70:d1:37:49:bc:cd:fb:68:76:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=958751bfaf100578d1b6d218815673268c9abb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:6a:d0:a4:39:e2:f5:fc:ba:e6:e4:4c:a2: e0:c0:40:6b:4d:a5:21:da:1b:f1:08:fc:2a:18:a1: 94:dd:98:ab:e7:53:69:79:45:99:ba:fc:1c:b0:ce: 8d:16:2a:a3:4d:c6:b3:ec:be:b5:19:9b:f8:70:69: 8f:2b:a2:b2:ac:33:74:89:30:da:4f:e8:b3:98:34: 3a:4a:a1:87:17:fe:71:1d:3c:a0:c9:aa:ba:55:d8: ed:b4:79:19:e1:26:f3:cf:d2:ad:ed:ea:e2:39:6b: 3c:b3:8f:d1:c4:6a:ba:5c:7d:ce:5e:75:12:49:d6: 45:ae:a3:f6:23:7d:19:7a:5d:bf:a5:d1:c9:c3:9c: 24:c1:e5:02:e7:b4:ba:58:ae:ae:21:ee:1e:52:8b: e8:9c:0d:ed:de:72:33:0d:b1:c9:08:dd:c2:a0:9b: 2b:c7:eb:8d:04:23:58:7d:4d:d1:91:f1:6a:80:0e: 18:23:f0:2e:1d:dc:6f:91:4a:15:41:2e:fa:a8:e8: 79:94:8f:c6:58:0e:56:3f:d8:76:da:f9:9a:08:e1: a5:23:6d:2b:6d:db:75:eb:5b:58:58:b8:b7:51:2d: 1d:fb:1c:b1:ee:23:e5:8b:be:86:70:4f:06:09:18: 3e:b7:2c:dc:e3:05:66:47:40:3f:25:42:b8:64:aa: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:51:BF:AF:10:05:78:D1:B6:D2:18:81:56:73:26:8C:9A:BB:25 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lYdRv68QBXjRttIYgVZzJoyauyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2900::/40 Signature Algorithm: sha256WithRSAEncryption a3:89:f7:7e:f3:d6:8b:87:45:88:0f:a4:a8:3e:b9:70:99:9b: 43:b9:ed:bf:35:4e:1c:bd:55:7a:14:f2:c2:eb:3e:2d:b3:f3: 4a:cf:b8:d9:c1:df:60:72:67:5e:cd:1f:75:09:e1:77:db:2d: 53:e4:9f:3c:2a:fe:87:a3:22:69:eb:33:4f:85:08:9e:4d:30: f9:77:22:17:c5:66:ec:cf:b8:cd:5f:b3:72:88:1b:29:5b:f9: 95:43:ec:84:26:27:02:27:25:ba:19:93:5c:b3:45:81:df:5a: a3:b6:58:98:fd:e4:bd:e6:98:c8:6c:17:a7:43:e0:a2:72:f0: cc:66:6c:d8:c0:9f:b3:93:19:a5:c5:74:91:2f:95:a9:61:c1: 6c:5c:d3:42:7d:9a:5e:00:98:8e:dc:61:e2:a0:f0:ab:86:33: 93:a5:ab:06:3b:e3:ec:c5:01:e6:78:82:e2:bf:32:2a:c0:1d: 8e:f2:b0:6d:32:61:45:65:86:c6:cf:4b:30:3c:ff:eb:35:0e: e5:89:1d:d9:63:86:9a:8e:8a:46:84:92:11:8e:98:26:a4:6e: 90:0c:d4:64:98:0e:e1:0c:78:ce:0b:19:d3:c5:c8:e8:24:18: 6d:01:83:43:8a:d6:e4:31:63:12:2b:b3:4e:b6:19:ee:90:66: 9b:8a:21:ca -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLkqMtRw0TdJvM37aHZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTg3NTFiZmFmMTAwNTc4ZDFiNmQyMTg4MTU2NzMyNjhjOWFiYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQNq0KQ54vX8uubkTKLgwEBrTaUh 2hvxCPwqGKGU3Zir51NpeUWZuvwcsM6NFiqjTcaz7L61GZv4cGmPK6KyrDN0iTDa T+izmDQ6SqGHF/5xHTygyaq6VdjttHkZ4Sbzz9Kt7eriOWs8s4/RxGq6XH3OXnUS SdZFrqP2I30Zel2/pdHJw5wkweUC57S6WK6uIe4eUovonA3t3nIzDbHJCN3CoJsr x+uNBCNYfU3RkfFqgA4YI/AuHdxvkUoVQS76qOh5lI/GWA5WP9h22vmaCOGlI20r bdt161tYWLi3US0d+xyx7iPli76GcE8GCRg+tyzc4wVmR0A/JUK4ZKpawQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJWHUb+vEAV40bbSGIFWcyaMmrslMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvbFlkUnY2OFFCWGpSdHRJWWdWWnpKb3lhdXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxykw DQYJKoZIhvcNAQELBQADggEBAKOJ937z1ouHRYgPpKg+uXCZm0O57b81Thy9VXoU 8sLrPi2z80rPuNnB32ByZ17NH3UJ4XfbLVPknzwq/oejImnrM0+FCJ5NMPl3IhfF ZuzPuM1fs3KIGylb+ZVD7IQmJwInJboZk1yzRYHfWqO2WJj95L3mmMhsF6dD4KJy 8MxmbNjAn7OTGaXFdJEvlalhwWxc00J9ml4AmI7cYeKg8KuGM5OlqwY74+zFAeZ4 guK/MirAHY7ysG0yYUVlhsbPSzA8/+s1DuWJHdljhpqOikaEkhGOmCakbpAM1GSY DuEMeM4LGdPFyOgkGG0Bg0OK1uQxYxIrs062Ge6QZpuKIco= -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:03 2026 by rpki-client